What happens to compressed event files when a new config to delete processed log files is applied?

Products

• Data Center Security Server

Issue/Introduction

There are agents with ZIP files in an archive directory that are old and are not removed after applying a new Common Parameters config that is set to Delete Log Files After Processing.

Resolution

The agent does not remove old files when a new configuration is applied which is setup to Delete Log Files After Processing.

If the events have not been processed before, or you are not sure you can move the zip files from the archive directory to the upload directory.

This will cause the Agent to upload the events to the Manager.

Then, because they were just newly process be deleted.